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Comment on "Quantum Key Distribution in the Holevo 
Limit" 

In a Letter, Cabello fl'] proposed a quantum key distribution 
(QKD) Protocol which attended to Holevo limit. He assumed 
that the quantum channel is composed of two qubits (1 and 2), 
and is prepared with equal probabilities in one of four orthog- 
onal pure states Itpi) (i — 0, 1, 2, 3), and that Eve cannot have 
access to qubit 2 while she still holds the qubit I. He con- 
siders the following states (for simplicity, we have replaced 
polarization states with spin states) 

|V'o)-|00)i2 |V.i) = ^[|10)i2 + 101)12] 

1^-2) = ^[|10)l2- 101)12] |V3)-|ll)l2 (1) 

We use the states |0) and |1) to represent spin up and spin 
down respectively. The efficiency of a QKD protocol, E, is 
defined as 111]; 

E=^j-, (2) 

qt + bt 

where bg is the expected number of secret bits received by 
Bob, Qt is the number of qubits used in the quantum channel, 
and bt is the number of bits used in the classical channel be- 
tween Alice and Bob. In Cabllo's scheme bt — and Qs — qt, 
which leads to _E = 1 (the Holevo limit). Cabello's proto- 
col (CP) has some basic properties: (a) CP uses all of Hilbert 
space dimensions, (b) He has defined an interesting criterion 
for the efficiency of QKD protocols, (c) He avoids using clas- 
sical channel. 

Eve could use a simple plan to distinguish between (-00 , V'3 ) 
and {ipi,ip2), without being detected by Alice and Bob. In 
other words, the set of four states are now partitioned into two 
sets. To show this, we assume Eve's particle to be in the state 
0)e. When the qubit 1 passes through the first channel, she 
applies a CNOT operation on the qubit 1, as the control qubit, 
and her own particle, as the target. Then, she lets the qubit 
1 goes to Bob's system. When she receives the qubit 2, she 
does the same operation on it and on her own qubit. After this 
operations, we have: 

IV'z)|0)e ^ |V'^)|0)e i = 0,3 

|0i)|O)e ^ |^.)|l)e ^ = l,2 (3) 

At this stage, there is a trick by which Eve can distinguish ex- 
actly between two of the four states After the application 
of the second CNOT, she makes a measurement on her own 
particle in the {|0), |1)} basis. If she gets |1), she would let 
the qubit 2 go to Bob's system. Otherwise, by a measurement 
on the qubit 2 in the {|0), |1)} basis, she could understand 
whether the state of Alice and Bob is |00) or 1 11). This means 
that an undetectable Eve can know Alice's encoding whenever 
Alice uses the basis (ipojip^), making the CP insecure. 

In the BB84 [3] protocol, security is guaranteed by the no- 
cloning theorem in the non-orthogonal states. CP was founded 


on the no-cloning principle for orthogonal states, which was 
suggested by T. Mor He proposed that the two (or more) 
orthogonal states cannot be cloned, if the reduced density 
matrices of the first subsystem are non-orthogonal and non- 
identical and the reduced density matrices of the second sub- 
system are non-orthogonal. Here a basic question is whether 
no-cloning condition for non-orthogonal and orthogonal states 
is sufficient to have the security of QKD protocol? With at- 
tention to our Eavesdropping approach, it seems that Mor's 
arguments for no-cloning principal for orthogonal states [4] is 
not general enough to avoid eavesdropping. In what follows, 
we would like to show that our approach is not restricted to 
CP. For example, we consider two non-maximally entangled 
states as follows: 

1^) = cosalO)i|l)2 +sina|l)i|0)2 
10) =cos/3|0)i|0)2 + sin/3|l)i|l)2 

with < a,/3 < tt/2 and a ^ (3 ^ 7r/4. The re- 
duce density matrices for the first subsystems are: — 

cos2 a|0) (0| + sin^ a| 1) (1 1 , pj, = cos^ /3|0) (0| + sin^ /3| 1) (1 1 . 
These reduced density matrices are neither orthogonal nor 
identical, and so they could' t be cloned, and the reduced den- 
sity matrices for second subsystems are: = cos^ a| 1) (1 1 + 
sin2a|0)(Q|,4 = cos^ /31Q)(0| +sin2 /3|1)(1|. These reduced 
density matrices are not orthogonal to each other, but this pro- 
tocol is not secured completely against a double CNOT opera- 
tions. 

Here are some questions: What are the defects in the Mor 
proposal? How Mor proposal can be repaired? In another 
paper in progress, we respond to these questions. 
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